CVE-2017-1000159

CVE-2017-1000159 is a command-injection vulnerability in the DVI exporter of Evince (GNOME) that can be triggered when printing/exporting to PDF by supplying a crafted filename. Affected products: Evince (GNOME document viewer); vulnerable component: DVI exporter invoked during DVI→PDF workflow. ...